Infrastructure service management — Sysaro Service Fleet

Service Fleet does not reimplement nginx, runtimes, databases or systemd. It provides one operational layer across 18 service profiles and routes operators to the specialist manager when deeper configuration is required.

Current management depth

Depth is stated explicitly: inventory/lifecycle is not presented as a full configuration manager.

Service	Depth	Surface	Managed scope
nginx	Deep	Web Stack	Inventory, site config, validation, reload and rollback
PHP-FPM 8.5	Deep	Runtime / Sites	Version policy, pools, isolation and structured tuning
PostgreSQL 18	Deep	Data Services	Inventory, lifecycle, DB/access/backup and version policy
Valkey	Deep	Data Services	Redis-compatible lifecycle, topology and health
Temporal Server	Preview + ops	Service Fleet	Readiness and typed PostgreSQL deployment profile; apply awaits canonical OCI ownership
ClickHouse	Typed config	Service Fleet	Sysaro-owned fragment, validation, readiness and rollback
S3-compatible storage	Typed + endpoint	Object Storage	Local MinIO typed config; external S3 endpoint and SigV4 health
Node.js LTS	Deep	Runtimes	LTS verification and exact runtime binding
FFmpeg + FFprobe	Operations	Service Fleet	Completeness and inventory
Remotion render worker	Managed process	Processes	Preset, Node runtime and systemd/cgroups
OpenTelemetry Collector	Typed config	Observability	Contrib profile, validate, readiness and rollback
Prometheus	Typed config	Observability	promtool validation, readiness and rollback
Grafana	Typed config	Observability	Managed environment and declarative datasources
Loki	Typed config	Observability	Config verification, OTLP topology, readiness and rollback
Tempo	Typed config	Observability	Config verification, OTLP topology, readiness and rollback
systemd	Deep	Processes	Managed units, timers, cgroups and journald; PID 1 lifecycle is blocked
Docker / OCI runtime	Operations	Service Fleet	Canonical OCI workload lifecycle; generic container command is blocked
GitLab Runner	Operations	Service Fleet	Inventory/lifecycle/readiness; typed registration/config remains on roadmap

Principle

Do not duplicate specialist managers

nginx stays in Web Stack, PostgreSQL/Valkey in Data Services, PHP/Node in Runtime Manager, and systemd/Remotion in Processes.

Safety

Backend-aware lifecycle

Sysaro distinguishes systemd, Docker/Podman and binary discovery. OCI actions are limited to canonical Sysaro workload names.

Continue

Related Sysaro capabilities

Sysaro

A Linux server control panel without a generic root shell

Sysaro manages sites, nginx, PHP-FPM, PostgreSQL, Valkey, systemd, TLS, DNS, deployments and backups through typed operations without a generic root shell.

Sysaro

Treat observability as managed infrastructure

Sysaro manages OpenTelemetry, Prometheus, Grafana, Loki and Tempo with typed configuration, native validation, readiness checks and rollback.

Sysaro

Security starts by reducing privileged capability

Sysaro security architecture uses mTLS Agent identity, typed jobs, sealed secrets, RBAC, audit trail, managed config ownership, validation and rollback.

Service evidence